在本文中，我想详细介绍使用Gradle收集器通过Sonatype Maven Central存储库中的Github Actions从头开始发布Java工件的过程。

我决定写这篇文章是因为在一个地方缺少普通的教程。所有信息都必须从各种来源中分块收集，而并非完全新鲜。谁在乎，欢迎来猫。

在Sonatype中创建存储库

第一步是在Sonatype Maven Central中创建一个存储库。为此，请转到此处，注册并创建一个新任务，要求我们为我们创建一个存储库。我们驱动项目的GroupId，指向项目的Project URL链接和指向项目所在的版本控制系统的SCM url链接。这里的GroupId的格式应为com.example，com.example.domain，com.example.testsupport，也可以是指向github的链接：github.com/yourusername- > io.github.yourusername。无论如何，您都需要确认该域或配置文件的所有权。如果您指定了github配置文件，他们将要求您创建具有所需名称的公共存储库。

确认后的一段时间，将创建您的GroupId，我们可以继续进行下一步，即Gradle配置。

配置Gradle

在撰写本文时，我没有找到任何Gradle插件可以帮助发布该工件。这是我找到的唯一插件，但是作者拒绝了他的进一步支持。因此，我决定自己动手做，因为做起来并不难。

首先要了解的是Sonatype的发布要求。它们如下：

源代码和JavaDoc的存在，即必须存在-sources.jar和-javadoc.jar文件。如文档中所述，如果无法提供源代码或文档，则可以制作一个虚拟对象-sources.jar或-javadoc.jar使用简单的自述文件通过测试。
GPG/PGP, .asc , , .
pom
groupId, artifactId version. -SNAPSHOT
name, description url
,

, . .

build.gradle . , , , url, . :

def customizePom(pom) {
    pom.withXml {
        def root = asNode()

        root.dependencies.removeAll { dep ->
            dep.scope == "test"
        }

        root.children().last() + {
            resolveStrategy = DELEGATE_FIRST

            description 'Some description of artifact'
            name 'Artifct name'
            url 'https://github.com/login/projectname'
            organization {
                name 'com.github.login'
                url 'https://github.com/login'
            }
            issueManagement {
                system 'GitHub'
                url 'https://github.com/login/projectname/issues'
            }
            licenses {
                license {
                    name 'The Apache License, Version 2.0'
                    url 'http://www.apache.org/licenses/LICENSE-2.0.txt'
                }
            }
            scm {
                url 'https://github.com/login/projectname'
                connection 'scm:https://github.com/login/projectname.git'
                developerConnection 'scm:git://github.com/login/projectname.git'
            }
            developers {
                developer {
                    id 'dev'
                    name 'DevName'
                    email 'email@dev.ru'
                }
            }
        }
    }
}

, -sources.jar -javadoc.jar . java :

java {
    withJavadocJar()
    withSourcesJar()
}

, GPG/PGP . signing:

plugins {
    id 'signing'
}

signing {
    sign publishing.publications
}

, publishing:

publishing {
    publications {
        mavenJava(MavenPublication) {
            customizePom(pom)
            groupId group
            artifactId archivesBaseName
            version version

            from components.java
        }
    }
    repositories {
        maven {
            url "https://oss.sonatype.org/service/local/staging/deploy/maven2"
            credentials {
                username sonatypeUsername
                password sonatypePassword
            }
        }
    }
}

sonatypeUsername sonatypePassword , , sonatype.org.

, build.gradle :

build.gradle

plugins {
    id 'java'
    id 'maven-publish'
    id 'signing'
}

java {
    sourceCompatibility = JavaVersion.VERSION_1_8
    targetCompatibility = JavaVersion.VERSION_1_8
    withJavadocJar()
    withSourcesJar()
}

group 'io.github.githublogin'
archivesBaseName = 'projectname'
version = System.getenv('RELEASE_VERSION') ?: "0.0.1"

repositories {
    mavenCentral()
}

dependencies {
    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.5.2'
    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.5.2'
}

test {
    useJUnitPlatform()
}

jar {
    from sourceSets.main.output
    from sourceSets.main.allJava
}

signing {
    sign publishing.publications
}

publishing {
    publications {
        mavenJava(MavenPublication) {
            customizePom(pom)
            groupId group
            artifactId archivesBaseName
            version version

            from components.java
        }
    }
    repositories {
        maven {
            url "https://oss.sonatype.org/service/local/staging/deploy/maven2"
            credentials {
                username sonatypeUsername
                password sonatypePassword
            }
        }
    }
}

def customizePom(pom) {
    pom.withXml {
        def root = asNode()

        root.dependencies.removeAll { dep ->
            dep.scope == "test"
        }

        root.children().last() + {
            resolveStrategy = DELEGATE_FIRST

            description 'Some description of artifact'
            name 'Artifct name'
            url 'https://github.com/login/projectname'
            organization {
                name 'com.github.login'
                url 'https://github.com/githublogin'
            }
            issueManagement {
                system 'GitHub'
                url 'https://github.com/githublogin/projectname/issues'
            }
            licenses {
                license {
                    name 'The Apache License, Version 2.0'
                    url 'http://www.apache.org/licenses/LICENSE-2.0.txt'
                }
            }
            scm {
                url 'https://github.com/githublogin/projectname'
                connection 'scm:https://github.com/githublogin/projectname.git'
                developerConnection 'scm:git://github.com/githublogin/projectname.git'
            }
            developers {
                developer {
                    id 'dev'
                    name 'DevName'
                    email 'email@dev.ru'
                }
            }
        }
    }
}

, : System.getenv('RELEASE_VERSION'). .

PGP

Sonatype GPG/PGP . GnuPG .

: gpg --gen-key, , e-mail, .
id : gpg --list-secret-keys --keyid-format short. Id , : rsa2048/9B695056
https://keys.openpgp.org : gpg --keyserver https://keys.openpgp.org/ --send-keys 9B695056
, : gpg --export-secret-key 9B695056 > D:\\gpg\\9B695056.gpg

Github Actions

, , Github Actions.
Github Actions – , , CI/CD. , : , issues. .

Sonatype , .

, id , , , PGP , / Sonatype. :

SONATYPE_USERNAME/SONATYPE_PASSWORD — /, Sonatype
SIGNING_KEYID/SIGNING_PASSWORD — id PGP , .

GPG_KEY_CONTENTS . , PGP . , , .

gpg: gpg --symmetric --cipher-algo AES256 9B695056.gpg, . : SECRET_PASSPHRASE
base64: base64 9B695056.gpg.gpg > 9B695056.txt. : GPG_KEY_CONTENTS.

PR

: .github/workflows.

, , gradle-ci-build.yml :

name: build

on:
  push:
    branches:
      - master
      - dev
      - testing
  pull_request:

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1
      - name: Set up JDK 8
        uses: actions/setup-java@v1
        with:
          java-version: 8

      - name: Build with Gradle
        uses: eskatos/gradle-command-action@v1
        with:
          gradle-version: current
          arguments: build -PsonatypeUsername=${{secrets.SONATYPE_USERNAME}} -PsonatypePassword=${{secrets.SONATYPE_PASSWORD}}

master, dev testing, .

jobs , . ubuntu, Java 8, Gradle eskatos/gradle-command-action@v1, , arguments. secrets.SONATYPE_USERNAME secrets.SONATYPE_PASSWORD , .

Actions:

gradle-ci-publish.yml:

name: publish

on:
  push:
    tags:
      - 'v*'

jobs:
  publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1
      - name: Set up JDK 8
        uses: actions/setup-java@v1
        with:
          java-version: 8

      - name: Prepare to publish
        run: |
          echo '${{secrets.GPG_KEY_CONTENTS}}' | base64 -d > publish_key.gpg
          gpg --quiet --batch --yes --decrypt --passphrase="${{secrets.SECRET_PASSPHRASE}}" \
          --output secret.gpg publish_key.gpg
          echo "::set-env name=RELEASE_VERSION::${GITHUB_REF:11}"

      - name: Publish with Gradle
        uses: eskatos/gradle-command-action@v1
        with:
          gradle-version: current
          arguments: test publish -Psigning.secretKeyRingFile=secret.gpg -Psigning.keyId=${{secrets.SIGNING_KEYID}} -Psigning.password=${{secrets.SIGNING_PASSWORD}} -PsonatypeUsername=${{secrets.SONATYPE_USERNAME}} -PsonatypePassword=${{secrets.SONATYPE_PASSWORD}}

, . , v.

PGP , . RELEASE_VERSION gradle.build . Prepare to publish. GPG_KEY_CONTENTS, gpg , , secret.gpg.

GITHUB_REF, , . refs/tags/v0.0.2 11 , . Gradle : test publish

Sonatype

, . :

v. Publish release, , Sonatype Nexus :

Staging . Open, Close, . , Close . MavenCentral. , Release, Sonatype.

, MavenCentral, , . , . , . , MavenCentral 5 .

就是这样，我们在MavenCentral中发布了我们的工件。

有用的链接

类似文章，仅通过maven发布
分期存储库声纳型
Jira Sonatype，您需要在其中创建任务
所有这些都已建立的示例存储库

使用Gradle和Github操作在Sonatype Maven中央存储库中发布Java项目

在Sonatype中创建存储库

配置Gradle

PGP

Github Actions

PR

Sonatype

有用的链接

More articles: